Amazon DVA-C02 Online Practice Questions and Exam Preparation

Amazon DVA-C02 Online Questions & Answers

• Question 131:

  An application stores user data in Amazon S3 buckets in multiple AWS Regions. A developer needs to implement a solution that analyzes the user data in the S3 buckets to find sensitive information. The analysis findings from all the S3 buckets must be available in the eu-west-2 Region.

  Which solution will meet these requirements with the LEAST development effort?

  A. Create an AWS Lambda function to generate findings. Program the Lambda function to send the findings to another S3 bucket in eu-west-2.
  B. Configure Amazon Made to generate findings. Use Amazon EventBridge to create rules that copy the findings to eu-west-2.
  C. Configure Amazon Inspector to generate findings. Use Amazon EventBridge to create rules that copy the findings to eu-west-2.
  D. Configure Amazon Macie to generate findings and to publish the findings to AWS CloudTrail. Use a CloudTrail trail to copy the results to eu-west-2.
  B. Configure Amazon Made to generate findings. Use Amazon EventBridge to create rules that copy the findings to eu-west-2.

  ---

  Explanation

• Question 132:

  A developer has written code for an application and wants to share it with other developers on the team to receive feedback. The shared application code needs to be stored long-term with multiple versions and batch change tracking. Which AWS service should the developer use?

  A. AWS CodeBuild
  B. Amazon S3
  C. AWS CodeCommit
  D. AWS Cloud9
  C. AWS CodeCommit

  ---

  Explanation

• Question 133:

  An application uses AWS X-Ray to generate a large amount of trace data on an hourly basis. A developer wants to use filter expressions to limit the returned results through user-specified custom attributes. How should the developer use filter expressions to filter the results in X-Ray?

  A. Add custom attributes as annotations in the segment document.
  B. Add custom attributes as metadata in the segment document.
  C. Add custom attributes as new segment fields in the segment document.
  D. Create new sampling rules that are based on custom attributes.
  A. Add custom attributes as annotations in the segment document.

  ---

  Explanation

• Question 134:

  A company has a three-tier application that is deployed in Amazon Elastic Container Service (Amazon ECS). The application is using an Amazon RDS for MySQL DB instance. The application performs more database reads than writes.

  During times of peak usage, the application's performance degrades. When this performance degradation occurs, the DB instance's ReadLatency metric in Amazon CloudWatch increases suddenly.

  How should a developer modify the application to improve performance?

  A. Use Amazon ElastiCache to cache query results.
  B. Scale the ECS cluster to contain more ECS instances.
  C. Add read capacity units (RCUs) to the DB instance.
  D. Modify the ECS task definition to increase the task memory.
  A. Use Amazon ElastiCache to cache query results.

  ---

  Explanation

• Question 135:

  A developer is optimizing an AWS Lambda function and wants to test the changes in production on a small percentage of all traffic. The Lambda function serves requests to a REST API in Amazon API Gateway. The developer needs to deploy their changes and perform a test in production without changing the API Gateway URL.

  Which solution will meet these requirements?

  A. Define a function version for the currently deployed production Lambda function. Update the API Gateway endpoint to reference the new Lambda function version. Upload and publish the optimized Lambda function code. On the production API Gateway stage, define a canary release and set the percentage of traffic to direct to the canary release. Update the API Gateway endpoint to use the $LATEST version of the Lambda function. Publish the API to the canary stage.
  B. Define a function version for the currently deployed production Lambda function. Update the API Gateway endpoint to reference the new Lambda function version. Upload and publish the optimized Lambda function code. Update the API Gateway endpoint to use the $LATEST version of the Lambda function. Deploy a new API Gateway stage.
  C. Define an alias on the $LATEST version of the Lambda function. Update the API Gateway endpoint to reference the new Lambda function alias. Upload and publish the optimized Lambda function code. On the production API Gateway stage, define a canary release and set the percentage of traffic to direct to the canary release. Update the API Gateway endpoint to use the SLAT EST version of the Lambda function. Publish to the canary stage.
  D. Define a function version for the currently deployed production Lambda function. Update the API Gateway endpoint to reference the new Lambda function version. Upload and publish the optimized Lambda function code. Update the API Gateway endpoint to use the $LATEST version of the Lambda function. Deploy the API to the production API Gateway stage.
  C. Define an alias on the $LATEST version of the Lambda function. Update the API Gateway endpoint to reference the new Lambda function alias. Upload and publish the optimized Lambda function code. On the production API Gateway stage, define a canary release and set the percentage of traffic to direct to the canary release. Update the API Gateway endpoint to use the SLAT EST version of the Lambda function. Publish to the canary stage.

  ---

  Explanation

  A Lambda alias is a pointer to a specific Lambda function version or another alias1. A Lambda alias allows you to invoke different versions of a function using the same name1. You can also split traffic between two aliases by assigning

  weights to them1. In this scenario, the developer needs to test their changes in production on a small percentage of all traffic without changing the API Gateway URL. To achieve this, the developer can follow these steps:

  By using this solution, the developer can test their changes in production on a small percentage of all traffic without changing the API Gateway URL. The developer can also monitor and compare metrics between the canary and production

  releases, and promote or disable the canary as needed2.

• Question 136:

  A developer is using an AWS CodePipeline pipeline to provide continuous integration and continuous delivery (CI/CD) support for a Java application. The developer needs to update the pipeline to support the introduction of a new application dependency .jar file. The pipeline must start a build when a new version of the .jar file becomes available.

  Which solution will meet these requirements?

  A. Create an Amazon S3 bucket to store the dependency .jar file. Publish the dependency .jar file to the S3 bucket. Use an Amazon Simple Notification Service (Amazon SNS) notification to start a CodePipeline pipeline build.
  B. Create an Amazon Elastic Container Registry (Amazon ECR) private repository. Publish the dependency .jar file to the repository. Use an ECR source action to start a CodePipeline pipeline build.
  C. Create an Amazon Elastic Container Registry (Amazon ECR) private repository. Publish the dependency .jar file to the repository. Use an Amazon Simple Notification Service (Amazon SNS) notification to start a CodePipeline pipeline build.
  D. Create an AWS CodeArtifact repository. Publish the dependency .jar file to the repository. Use an Amazon EventBridge rule to start a CodePipeline pipeline build.
  D. Create an AWS CodeArtifact repository. Publish the dependency .jar file to the repository. Use an Amazon EventBridge rule to start a CodePipeline pipeline build.

  ---

  Explanation

• Question 137:

  A developer is building an application that includes an AWS Lambda function written in .NET Core. The Lambda function's code needs to interact with Amazon DynamoDB tables and Amazon S3 buckets. The developer must minimize the Lambda function's deployment time and invocation duration.

  Which solution will meet these requirements?

  A. Increase the Lambda function's memory.
  B. Include the entire AWS SDK for .NET in the Lambda function's deployment package.
  C. Include only the AWS SDK for .NET modules for DynamoDB and Amazon S3 in the Lambda function's deployment package.
  D. Configure the Lambda function to download the AWS SDK for .NET from an S3 bucket at runtime.
  C. Include only the AWS SDK for .NET modules for DynamoDB and Amazon S3 in the Lambda function's deployment package.

  ---

  Explanation

• Question 138:

  A developer is investigating an issue in part of a company's application. In the application messages are sent to an Amazon Simple Queue Service (Amazon SQS) queue The AWS Lambda function polls messages from the SQS queue and sends email messages by using Amazon Simple Email Service (Amazon SES) Users have been receiving duplicate email messages during periods of high traffic.

  Which reasons could explain the duplicate email messages? (Select TWO.)

  A. Standard SQS queues support at-least-once message delivery
  B. Standard SQS queues support exactly-once processing, so the duplicate email messages are because of user error.
  C. Amazon SES has the DomainKeys Identified Mail (DKIM) authentication incorrectly configured
  D. The SQS queue's visibility timeout is lower than or the same as the Lambda function's timeout.
  E. The Amazon SES bounce rate metric is too high.
  A. Standard SQS queues support at-least-once message delivery
  D. The SQS queue's visibility timeout is lower than or the same as the Lambda function's timeout.

  ---

  Explanation

  Standard SQS queues support at-least-once message delivery, which means that a message can be delivered more than once to the same or different consumers. This can happen if the message is not deleted from the queue before the visibility timeout expires, or if there is a network issue or a system failure. The SQS queue's visibility timeout is the period of time that a message is invisible to other consumers after it is received by one consumer. If the visibility timeout is lower than or the same as the Lambda function's timeout, the Lambda function might not be able to process and delete the message before it becomes visible again, leading to duplicate processing and email messages. To avoid this, the visibility timeout should be set to at least 6 times the length of the Lambda function's timeout. The other options are not related to the issue of duplicate email messages. References Using the Amazon SQS message deduplication ID Exactly-once processing - Amazon Simple Queue Service Amazon SQS duplicated messages in queue - Stack Overflow amazon web services - How long can duplicate SQS messages persist ... Standard SQS - Duplicate message | AWS re:Post - Amazon Web Services, Inc.

• Question 139:

  An AWS Lambda function requires read access to an Amazon S3 bucket and requires read/write access to an Amazon DynamoDB table. The correct IAM policy already exists.

  What is the MOST secure way to grant the Lambda function access to the S3 bucket and the DynamoDB table?

  A. Attach the existing IAM policy to the Lambda function.
  B. Create an IAM role for the Lambda function. Attach the existing IAM policy to the role. Attach the role to the Lambda function.
  C. Create an IAM user with programmatic access. Attach the existing IAM policy to the user. Add the user access key ID and secret access key as environment variables in the Lambda function.
  D. Add the AWS account root user access key ID and secret access key as encrypted environment variables in the Lambda function.
  B. Create an IAM role for the Lambda function. Attach the existing IAM policy to the role. Attach the role to the Lambda function.

  ---

  Explanation

  The most secure way to grant the Lambda function access to the S3 bucket and the DynamoDB table is to create an IAM role for the Lambda function and attach the existing IAM policy to the role. This way, you can use the principle of least privilege and avoid exposing any credentials in your function code or environment variables. You can also leverage the temporary security credentials that AWS provides to the Lambda function when it assumes the role. This solution follows the best practices for working with AWS Lambda functions1 and designing and architecting with DynamoDB2. References Best practices for working with AWS Lambda functions Best practices for designing and architecting with DynamoDB

• Question 140:

  A developer has created an AWS Lambda function that is written in Python. The Lambda function reads data from objects in Amazon S3 and writes data to an Amazon DynamoDB table. The function is successfully invoked from an S3 event notification when an object is created. However, the function fails when it attempts to write to the DynamoDB table.

  What is the MOST likely cause of this issue?

  A. The Lambda function's concurrency limit has been exceeded.
  B. DynamoDB table requires a global secondary index (GSI) to support writes.
  C. The Lambda function does not have IAM permissions to write to DynamoDB.
  D. The DynamoDB table is not running in the same Availability Zone as the Lambda function.
  C. The Lambda function does not have IAM permissions to write to DynamoDB.

  ---

  Explanation